
IN THE CLAIMS : 

^^^^^ Please amend claim 41 as follows: 

Claims 1-32 (Previously Cancelled) 

33. (Previously Presented) A method of securing communication betv^een a first party 
and a second party in a telecommunications network comprising the steps of: 

defining a criteria for selecting one of a plurality of different security methods, the 
plurality of security methods each comprising a plurality of messages selected from a set 
of message types, at least two different security methods having at least one message in 
common; 

selecting one of the said plurality of different security methods in accordance with 
said defined criteria; and 

performing said security method. 

34. (Previously Presented) A method as claimed in claim 33, wherein said criteria is to 
select the security method is selected at random. 

35. (Previously Presented) A method as claimed in claim 33, wherein said criteria is to 
select said security method based on the processing capability of the first and/or second 
party. 
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36. (Previously Presented) A method as claimed in claim 33, wherein said criteria is to 
select the security method in dependence on the amount of time since the last security 
method was performed. 

37. (Previously Presented) A method as claimed in claim 33, wherein said criteria is to 
select the security method based on the function provided by the security method. 

38. (Previously Presented) A method as claimed in claim 33, wherein the plurality of 
security methods comprise at least one authentication method and/or at least one rekeying 
method. 

39. (Previously Presented) A method as claimed in claim 38, wherein at least one 
authentication method includes a key exchange to create a shared secret. 

40. (Previously Presented) A method as claimed in claim 3 8, wherein a rekeying 
method is performed after an authentication method. 

41 . (Currently Amended) A method as claimed in claim 38, wherein a rekeying 
method is without carried out without authentication. 
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42. (Previously Presented) A method as claimed in claim 38, wherein the rekeying 
method is authenticated. 

43. (Previously Presented) A method as claimed in claim 42, wherein the set of 
messages includes at least one of the following message types: 

at least one random number message; at least one hash function message; at least one 
signature function message; at least one parameter for use with a given function message; 
at least one security parameter message; at least one key for a given function message; at 
least one encoded message; at least one message to and/or from at least one third party; 
and at least one authentication response message. 

44. (Previously Presented) A method as claimed in claim 43 wherein the set of 
messages includes the following message types: one signature function message; two 
security parameter messages; two random number messages; one encoded signature 
function message; one encoded user identification message; two parameters for use with 
given function messages; two hash function messages; one contact message with a third 
party; one response message from the third party; one authentication response message; 
and two public parameters for the given function. 



45. (Previously Presented) A method as claimed in claim 44, wherein the set of 
messages are as follows: 
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1. n, g 

2. R 

3. R' 

4. P 

5. P' 

6. g^mod n 

7 . g%od n 

8. hash[SIG 1] (n | g | g'' | | g^^ | P | P' | Rl R ' I B) 

9. hash[SIG 2] (nlglg^lg^lg^^yi PI P' |R|R' |B|U) 

10. SIGB(hash[SIGl]n|g|gHgy|g^^|p|p' |r|r' |b) 

11. EK(SIGu(hash[SIG2] (n | g | g'' | g^ | g''^ | P | P ' | R | R- | B | U) ) 

12. Ek(Su) 

13. hash[AUTH] (n|g|g''%od n|R|R' |B|U) , U 

14. hash[RESP] (hash[SEC]S|hash[AUTH] (nlglg'^ymod n|R|R'|B|U)) 

15. hash [SEC] (S | hash [AUTH] ( n | g | g'^ymod n|R|R' |B|U) ) 



where n and g are Diffie Hellman public parameters, R and R' are random numbers, P 
and P' are security parameters, g is a generator of the Diffie Hellman exchange, x and y 
are random exponents, n is the modulus of the Diffie Hellman key exchange, B and U are 
the identity of the first and second parties, SIG represents a signature, Ek represents 
encryption, AUTH represents authentication. 



46. (Previously Presented) A method as claimed in claim 43, wherein a first security 
method uses the following messages: the first and second keys for a given function 
messages; first and second random number messages, first and second security parameter 
messages, a signature function message, one encoded user identification message and 
optionally at least two parameters for use with a given function message. 
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47. (Previously Presented) A method as claimed in claim 43 wherein a second security 
method uses first and second random number messages, first and second security 
parameter messages, first and second keys for a given function messages, a signature 
function message and optionally first and second parameters for use with the given 
function message. 

48. (Previously Presented) A method as claimed in claim 43 wherein a third security 
method uses first and second random number messages, first and second security 
parameter messages, first and second keys for given function messages, one encoded user 
identification message, one message to and one message from a third party, one 
authentication response message and optionally first and second parameters for use with a 
given function message. 

49. (Previously Presented) A method as claimed in claim 43 wherein said security 
method is a first rekeying method and comprises first and second random number 
messages. 

50. (Previously Presented) A method as claimed in claim 43 wherein the security 
method is a second rekeying method and uses first and second random number messages 
and first and second hash function messages. 
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5 1 . (Previously Presented) A method as claimed in claim 43 wherein the security 
method is a third rekeying method comprising first and second random number messages, 
a signature function message and an encoded message. 

52. (Previously Presented) A method as claimed in claim 43, wherein one security 
method is a fourth rekeying method and comprises the use of first and second random 
number messages, one message to and one message from the third party and one 
authentication response message. 

53. (Previously Presented) A method as claimed in claim 43, wherein the given 
function is a Diffie-Hellman function. 

54. (Previously Presented) A method as claimed in claim 43, wherein at least one of 
said messages types comprises two messages, one message being from the first party and 
the other message being from the second party. 

55. (Previously Presented) A method as claimed in claim 43, wherein the encoded 
message is used to transfer information as to the identity of at least one of the first and 
second parties to the other of the first and second parties. 
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56. (Previously Presented) A method as claimed in claim 43, wherein at least one of 
said first and second parties is arranged to communicate with a trusted third party and is 
arranged to receive messages from and/or send messages to that trusted third party. 

57. (Previously Presented) A method as claimed in any of claims 43, wherein the 
exchange of messages between the first and second parties permits a shared secret to be 
created which is used to authenticate the communication between the parties. 

58. (Previously Presented) A method as claimed in claim 38, wherein at least one 
rekeying method comprises the steps of exchanging at least one random number between 
the first and second parties. 

59. (Previously Presented) A method as claimed in claim 58, wherein at least one of 
the random numbers is authenticated. 

60. (Previously Presented) A method as claimed in claim 33, wherein at least one of 
said first and second stations comprises a mobile station. 

61 . (Previously Presented) A method as claimed in claim 60, wherein at least one of 
the first and second stations comprises a base station. 
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62. (Previously Presented) A wireless telecommunication system comprising a first 
station and a second station with means adapted for performing all of the steps of the 
method according to claim 33. 




63. (Previously Presented) A telecommunications network element for securing 
communication between a first party and a second party comprising: 

means for defining a criteria for selecting one of a plurality of different security 
methods, the plurality of security methods each comprising a plurality of messages 
selected from a set of message types, at least two different security methods having at 
least one message in common; 

selection means for selecting one of said plurality of different security methods in 
accordance with said defined criteria; and 

means for ensuring that the communication between said first and second parties is 
in accordance with said selected security method. 
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